All it took to make an Google Edge TPU give up model hyperparameters was specific hardware, a novel attack technique … and ...
Researchers say models judge a prompt’s authority by how it sounds, not where it comes from.